Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
File:                     9HOLangCORiAdDf6GQfEytcpPvk.mft (raw, json)
Hash identifier:          SPKz8TdHHcxim+PDLE4UiTzr6TAVLjbXrVJneg7YDmU=
Subject key identifier:   40:DE:83:87:6A:16:B4:1A:B5:90:3C:06:ED:34:B7:AA:DB:7E:F9:D8
Authority key identifier: F4:73:8B:6A:78:02:39:18:80:74:37:FA:19:07:C4:CA:D7:29:3E:F9
Certificate issuer:       /CN=F3672E90AF/serialNumber=F4738B6A78023918807437FA1907C4CAD7293EF9
Certificate serial:       0640
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9HOLangCORiAdDf6GQfEytcpPvk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
Manifest number:          063E
Signing time:             Fri 17 Apr 2026 02:33:31 +0000
Manifest this update:     Fri 17 Apr 2026 02:33:30 +0000
Manifest next update:     Sun 19 Apr 2026 02:33:30 +0000
Files and hashes:         1: 9HOLangCORiAdDf6GQfEytcpPvk.crl (hash: iPxciYkhcaiL0azRW6HV8zj6AYOEij8MxrdGFoDQBJ4=)
                          2: 6A99DE584E7011F08BE3C38ADAE4EC9C.roa (hash: XsWgln8vG4e/xqc9ncPsPEMbepHsGpN9yBMj9MFLOwI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9HOLangCORiAdDf6GQfEytcpPvk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3672E90AF, serialNumber=F4738B6A78023918807437FA1907C4CAD7293EF9
        Validity
            Not Before: Apr 17 02:33:30 2026 GMT
            Not After : Apr 19 02:33:30 2026 GMT
        Subject: CN=69e19bfb-aaef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:fb:dc:84:3d:3d:b9:a7:1a:e6:41:86:be:
                    f2:75:f1:e1:66:41:a8:d7:a4:96:66:a1:43:b6:9c:
                    06:0c:4e:f9:0f:ce:6e:aa:33:f4:b1:cd:fd:1e:ea:
                    5c:12:78:d4:82:35:80:22:c2:5e:fa:9f:95:b9:eb:
                    1e:9b:4b:18:9f:00:9f:72:68:53:c7:bf:0f:42:b7:
                    95:86:77:01:85:b7:64:7b:b6:b2:94:b9:50:c7:94:
                    08:1f:25:1f:69:ba:dd:f3:de:f3:81:39:cb:2b:32:
                    c1:0a:4a:9d:7b:f6:f7:cc:dd:6e:8b:f5:ec:58:6e:
                    61:0b:eb:91:7d:8c:68:76:39:8f:62:5e:4a:9e:5a:
                    32:41:30:68:71:7f:20:ea:fc:fa:85:e6:0c:2b:43:
                    67:d1:86:81:9f:1a:a4:25:dc:dc:22:cc:d9:4c:b6:
                    6c:70:79:5d:1a:92:28:fa:0d:f7:bd:ac:74:ed:b8:
                    fc:7a:06:97:e7:65:35:7a:af:6e:48:7a:55:7e:d2:
                    ad:b3:c2:48:81:07:03:85:01:52:b3:f8:72:29:df:
                    cd:b6:ba:b9:92:1f:14:0d:d6:2c:d0:28:f6:f7:f8:
                    62:18:3b:d0:02:30:4d:b0:05:a1:bd:0d:f0:31:71:
                    87:90:4b:2c:70:f4:65:1e:b0:51:a4:36:4f:c0:90:
                    e9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DE:83:87:6A:16:B4:1A:B5:90:3C:06:ED:34:B7:AA:DB:7E:F9:D8
            X509v3 Authority Key Identifier:
                keyid:F4:73:8B:6A:78:02:39:18:80:74:37:FA:19:07:C4:CA:D7:29:3E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9HOLangCORiAdDf6GQfEytcpPvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2b:a8:98:ee:aa:25:44:93:9f:6d:c3:57:63:98:42:14:bd:
         2f:46:95:c1:88:af:9f:33:f4:6f:fd:94:a3:21:30:6a:99:24:
         09:91:d4:2e:ca:d9:e8:f5:fb:df:93:3d:a6:2c:62:c5:40:97:
         10:67:fa:1a:9c:13:1e:d5:05:c6:ad:aa:94:22:fa:3f:3f:c7:
         05:43:6e:53:ff:ab:0b:24:f8:25:a0:47:83:8d:d6:df:d7:f8:
         07:51:e7:71:2f:d2:94:59:37:82:4a:6f:6d:03:a6:27:38:40:
         22:df:61:bb:d2:b4:88:85:aa:a3:54:c6:f3:8d:19:b2:c1:f7:
         b7:c1:7b:49:ca:f4:9f:6a:d8:70:97:40:11:08:1c:c3:df:a5:
         fc:09:22:ea:56:9e:7a:cc:f2:92:a5:49:e5:5a:e6:4e:42:4b:
         60:28:58:b3:df:40:ab:02:31:c7:82:9f:df:13:e9:7e:0f:bc:
         fa:fb:b0:c1:6f:49:53:da:64:ff:74:72:7c:3e:12:9a:2d:5d:
         67:45:44:8b:99:f4:eb:97:a6:0d:68:d1:72:ed:de:17:2e:17:
         d2:9b:42:20:68:c1:ca:b3:73:15:3b:8b:84:01:cd:24:59:db:
         3f:80:5b:7b:4f:59:37:e5:a3:bb:f1:b5:75:ea:5e:94:19:13:
         03:00:25:15
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzJFOTBBRjExMC8GA1UEBRMoRjQ3MzhCNkE3ODAyMzkxODgwNzQzN0ZBMTkwN0M0
Q0FENzI5M0VGOTAeFw0yNjA0MTcwMjMzMzBaFw0yNjA0MTkwMjMzMzBaMBgxFjAU
BgNVBAMTDTY5ZTE5YmZiLWFhZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiffvchD09uaca5kGGvvJ18eFmQajXpJZmoUO2nAYMTvkPzm6qM/Sxzf0e
6lwSeNSCNYAiwl76n5W56x6bSxifAJ9yaFPHvw9Ct5WGdwGFt2R7trKUuVDHlAgf
JR9put3z3vOBOcsrMsEKSp179vfM3W6L9exYbmEL65F9jGh2OY9iXkqeWjJBMGhx
fyDq/PqF5gwrQ2fRhoGfGqQl3NwizNlMtmxweV0akij6Dfe9rHTtuPx6BpfnZTV6
r25IelV+0q2zwkiBBwOFAVKz+HIp3822urmSHxQN1izQKPb3+GIYO9ACME2wBaG9
DfAxcYeQSyxw9GUesFGkNk/AkOlZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQN6D
h2oWtBq1kDwG7TS3qtt++dgwHwYDVR0jBBgwFoAU9HOLangCORiAdDf6GQfEytcp
PvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcyRTkwL0Q3NzlDMDMyNzNBNTExRUNBNTc0Njk5ODVBNDBENTc3LzlIT0xh
bmdDT1JpQWREZjZHUWZFeXRjcFB2ay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlIT0xhbmdDT1JpQWREZjZHUWZFeXRjcFB2ay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzJFOTAvRDc3OUMwMzI3M0E1MTFFQ0E1NzQ2OTk4NUE0
MEQ1NzcvOUhPTGFuZ0NPUmlBZERmNkdRZkV5dGNwUHZrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZK6iY7qolRJOfbcNXY5hCFL0vRpXB
iK+fM/Rv/ZSjITBqmSQJkdQuytno9fvfkz2mLGLFQJcQZ/oanBMe1QXGraqUIvo/
P8cFQ25T/6sLJPgloEeDjdbf1/gHUedxL9KUWTeCSm9tA6YnOEAi32G70rSIhaqj
VMbzjRmywfe3wXtJyvSfathwl0ARCBzD36X8CSLqVp56zPKSpUnlWuZOQktgKFiz
30CrAjHHgp/fE+l+D7z6+7DBb0lT2mT/dHJ8PhKaLV1nRUSLmfTrl6YNaNFy7d4X
LhfSm0IgaMHKs3MVO4uEAc0kWds/gFt7T1k35aO78bV16l6UGRMDACUV
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:16 2026 by rpki-client